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The purpose of the BBN time-sharing system 
is to increase the effectiveness of the PDP-1 
computer for those applications involving man- 
machine interaction by allowing each of the five 
users, each at his own typewriter to interact 
with the computer just as if he had a computer 
all to himself. The effectiveness of this inter- 
action is further enhanced by the use of the TYC 
language for controlling the operation and 
modification of programs. 

First the computer. The PDP-1* is a single 
address binary computer with an 18 bit word 
and five microsecond memory cycle; most in- 
structions require ten microseconds to execute. 
The basic memory size is 4096 words, but up to 
65,536 words may be addressed indirectly. The 
machine we used has 8192 words, 4096 of which 
are reserved for the time-sharing system. Each 
user sees a 4096 word memory. We shall de- 
scribe further relevant features of the computer 
later. 


* The PDP-1 computer is manufactured by Digital 
Equipment Corporation of Maynard, Massachusetts. 
All the equipment described in this paper was made by 
D.E.C. and their cooperation in developing and building 
the modifications and additions to the basic computer 
required for time-sharing was essential to the success 
of the project. 


Attached to the computer is a high speed 
magnetic drum memory divided into 22 fields 
each of 4096 words. A basic operation of the 
drum system is the memory-swap accomplished 
in 33 milliseconds. In this operation 4096 words 
are transferred from the core memory to a 
drum field and simultaneously the core memory 
is loaded from a different drum field. This per- 
mits the following time-sharing mode of opera- 
tion. 

A 4096 word drum field is allocated for sav- 
ing the core image of each user when his pro- 
gram is not running. A user’s program in run 
status is run for 140 milliseconds, then if there 
is another user also in run status, the state of 
core memory is stored in the first user’s core 
image on drum and simultaneously the second 
user’s core image is loaded into core and the 
second user’s program is started in the appro- 
priate place. In the worst case of all five users 
in run status, the system makes its rounds in 
5 x (140 + 33) = 865 milliseconds. For man- 
machine interaction this means that if the user 
types a character calling for a response from 
his program that requires less than 140 milli- 
seconds (= 14,000 machine instructions), he 
will get the first character of the response in 
less than .865 seconds. This worst case is ex- 
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pected to be rare because when a user’s program 
types out a multicharacter message, successive 
characters go into a buffer area in the system 
core ; when the buffer is full the user’s program 
is removed from run status until the buffer is 
nearly empty. Therefore, users with extensive 
output spend very little time in run status and 
the other users get correspondingly quicker 
service. (In fact the condition in which no 
users are in run status is expected to be so 
common that a provision for a background pro- 
gram to be run only when no time-sharer is in 
run status is contemplated. ) 

THE TYC CONTROL LANGUAGE 

The language used to control the debugging 
is adapted from the DDT language devised by 
the TX-0 and PDP-1 group at M.I.T. directed 
by Jack Dennis for the TX-0 and PDP-1 com- 
puters. The use of typewriters rather than the 
console switches for on-line debugging has been 
developed at M.I.T. and M.I.T. Lincoln Labor- 
atory since 1957, and at BBN since 1961. These 
languages have greatly increased the effective- 
ness of the TX-0, TX-2 and PDP-1 computers 
and are now being developed for the IBM 7090 
time-sharing system by F. J. Corbato of the 
M.I.T. Computation Center. Unfortunately, ex- 
cept for a recent paper by Corbato, the work 
has not been published. Our only bow at history 
is to credit John Gilmore with the first such 
system for the TX-0 in 1957. 

First, we shall consider the facilities for ex- 
amining and changing registers. Suppose the 
user wants to examine register 344. He types 

344/ 

and the computer types back the contents of 
this register interpreted as a computer instruc- 
tion if possible. Thus it might type back “add 
4072”. The user then has several options. 

1. He can carriage return and close the reg- 
ister if he is satisfied with its contents. 

2. He can ask to see the next register by 
hitting the backspace key. The computer might 
then type back 

345/ sub 4075. 

3. He can ask to see the previous register. 

4. He can ask to see register 4072 by hitting 
the tab key. 


5. He can ask for the contents of the register 
as an octal or decimal number. 

6. He can change the contents of the register 
by typing new contents such as “add 4073” and 
then hitting one of the delimiter characters. 

The computer user who does not have ex- 
perience with systems of this kind may not 
immediately realize the increase in effectiveness 
that these facilities alone give over console de- 
bugging. The advantages are that typing is 
easier than flipping switches, that a record is 
obtained of what was done, and that useful 
features can be added to the control language. 

As a further feature the user can define sym- 
bolic names of addresses so that his typeouts 
can take the form 

a/ add b + 3 
a + 1/ sub b + 6 

In order to start a program say at register 
3145 the user types 3145G. This gives the type- 
writer up to the program, but he can get it 
back for control purposes by typing center dot. 
If he does so he can interrogate and change 
registers without stopping his program but if 
he wants to stop it he types H. Once it is 
stopped he can start it where it left off by typ- 
ing G without a numerical argument. He can 
also interrogate the arithmetic registers either 
while the program is running or while it is 
stopped. Of course, the contents of a register 
interrogated when the program is interrupted 
at a random moment may not be significant; 
this depends on the program. 

Except at the beginning and the end of his 
session the user does not ordinarily use the 
paper tape apparatus. Instead he designates 
a position on the drum for the punch and a 
position for the reader using ‘TYC. An instruc- 
tion in the user’s program to punch a character 
onto paper tape actually results in entering the 
character into a buffer for transmission to the 
drum when the buffer is full or no punch in- 
structions have been given for a while. This 
feature allowed us to make available in the 
time-sharing system symbolic assembly pro- 
grams and other utility programs that were 
developed previously. 

The TYC language is described in detail in 
reference 7. 
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I Levant features of the pdp-i 

MPUTER 

n order to explain the detailed functioning 
he BBN time-sharing system, it is necessary 
mderstand the input-output system of the 
P-1 computer, the sequence break system and 
restricted mode. 

Typewriters and paper tape 
ach iot instruction transfers a single char- 
r between the 18 bit io register of the corn- 
er and the external device. All io instruc- 
s have the same left 5 bits, the 6th bit is 
nally used to determine whether the wait 
re the next instruction is determined by 
external device or whether the program 
is this responsibility. The remaining 12 bits 
he instruction are used to determine the 
:e and the direction of transfer. The char- 
's are 8 bits on paper tape and 6 bits for 
writers. When the computer is not in se- 
ce break mode a character typed by the 
results in turning on a sense flag which can 
iterrogated by the program to determine 
l to pick up the character. 

'rum 

transfers from the drum the number of 
s to be transferred and the locations in 
and on the drum are specified. During the 
transfer the arithmetic unit of the machine is 
tied up. 

machine has other input-output devices 
M operation does not have to be described 

in this paper. 

4. The sequence-break system. 

Besides the simple form of input-output de- 
scribed above, the machine has a sequence-break 
system which permits input-output and com- 
putation to be carried out simultaneously and 
. asynchronously. The BBN time-sharing system 
■ makes full use of sequence break. 

. The sequence-break system has 16 channels 
J|tp the outside world arranged in a priority 
•. chain with channel 0 having highest priority 
| and channel 17 8 lowest priority. Associated with • 

I eac h channel are four registers in core 0. When 
a signal comes from an io device that the device 
has a character ready for the computer or is 
ready to receive a character from the computer, 
an interrupt will occur if an interrupt is pres- 
^entJy allowed on that channel. When an inter- 
rupt occurs the contents of the ac (accumulator) 


io (input-output) and pc (program counter) 
registers are stored in three of the regis- 
ters and control is transferred to the fourth 
which must therefore contain a jump to a pro- 
gram for dealing with the interrupt. When this 
program hjis finished its work it must execute 
an indirect jump through the register where the 
program counter was stored when the break 
started. This returns control to the program 
that was interrupted and tells the sequence 
break system that the break is over. Once a 
break is started on a channel a break cannot 
occur on a lower priority channel nor can 
another break occur on the same channel until 
the break is over. Each channel can store one 
break until it is allowed to .occur. 

5. Restricted Mode 

This mode was devised specifically for the 
time-sharing system. When the computer is in 
this mode and if there is no break started in 
the sequence break system, then any of the 
following events lead to a sequence break on 
channel 16. 

1. An attempt to obey an io instruction. 

2. An instruction that would normally stop 
the computer such as a halt instruction or an 
illegal instruction. 

3. An attempt to refer to core 0. 

The instructions that enter and leave extend 
mode and restricted mode are considered io 
instructions. The time-sharing system operates 
only when a sequence break has occurred and 
hence is not subject to the restrictions. 

6. The Channel 17 Clock. 

Every 20 milliseconds a signal for a sequence 
break on channel 17 occurs. Programs can turn 
off channel 17 (or any other channel) by an io 
instruction if they don’t want breaks to occur. 
Note that channel 17 is the lowest priority 
channel. The clock is a multivibrator whose 
period is controlled by a potentiometer. 

HOW THE TIME-SHARING WORKS 

The time-sharing executive program is not 
readily described by a single flow chart because 
its different parts act asynchronously as de- 
termined by sequence breaks. It includes the 
following programs : 

1. The typewriter io program 
Associated with each typewriter is an input- 
output program and a buffer area. These pro- 
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grams are entered when sequence breaks occur. 
Suppose a user types a character w. The pro- 
gram knows whether the character is addressed 
to the user’s program or to TYC. 

On the other hand, if the interrupt comes 
from the completion of the type-out of a char- 
acter the program types the next character 
from the buffer if any. 

After transferring the information the break 
is ended. 

Channels 6, 7, 11, 14 and 15 are allocated to 
typewriters. 

2. The channel 16 dispatcher. 

The computer is in restricted mode during 
the operation of the time-sharing system. As 
we stated earlier, this means that io instruc- 
tions and instructions that halt the machine 
lead to sequence breaks on channel 16. The user 
programs his input-output just as if there were 
no time-sharing system. Therefore, when a 
channel 16 break occurs the program first looks 
at the instruction that caused the break. Sup- 
pose the instruction is a type-out instruction. 
If the type-out buffer is not full the character 
that the user program wants to type is added 
to the buffer and if necessary a sequence break 
on the typewriter channel is instigated to start 
typing. If the type-out buffer is full the pro- 
gram must be dismissed from run status. If the 
instruction is a type-in instruction, a character 
is given to the user program if there is one in 
the buffer; otherwise the program must be dis- 
missed from run status. 

If the instruction is discovered to be one that 
halts the machine, the program is dismissed 
from run status and a note is left for TYC to 
tell the user what happened. 

Paper tape input and output is handled in a 
similar way except that the dispatcher must 
check whether the user has the punch or reader 
assigned to him. If not, the user’s program is 
dismissed, and a complaint is made to him. As 
soon as the reader or punch has been relin- 
quished he can continue the program from 
where it left off. 

The typewriter and paper tape instructions 
are interpreted and simulated by the channel 
16 dispatcher so precisely that programs 
written before the time-sharing system was 
developed can be run without change in the 
system, provided they do not themselves use the 
sequence break system. This means that almost 


all the previously used symbolic assemblers, 
typewriter input-output routines, text editors 
etc. can be used without change and that the 
user can use the TYC language to debug rou- 
tines that are to be used outside it. 

3. The channel 17 clock routine. 

Every 20 milliseconds or so a sequence break 
signal is given on channel 17. Since channel 17 
is the lowest priority channel this break can 
take effect only when no typewriter, paper tape 
or channel 16 dispatcher break is in progress. 
Moreover, except when the channel 17 program 
turns off the sequence break system it can be 
interrupted by typewriter or paper tape se- 
quence breaks. 

The basic task of the channel 17 clock routine 
is to decide whether to remove the current user 
from core and if so to decide which user pro- 
gram to swap in as he goes out. A user may be 
removed from core for any of several reasons. 

1. His quantum of time is up and he should 
be put on the tail of the queue. 

2. He has filled an output buffer. 

3. He has askod for a character and there is 
none in the input buffer. 

4. He has tried to execute an illegal instruc- 
tion or to use input-output equipment not avail- 
able to him. 

5. The typewriter control program has filled 
a buffer or has finished a request concerning his 
program. 

If the channel 17 routine decides to remove 
the current user it will swap into core the next 
user in the round robin who is in run status. A 
user not in run status can become so for any of 
the following reasons. 

1. An output buffer is almost empty. 

2. A character requested by his program has i£ 
arrived. 

3. The typewriter control program wants 
him in core to interrogate registers, to change 
them, or to run the program. 

4. The typewriter control program (TYC). | 

The typewriter control program is in core 0 
and it interprets and obeys requests from the 
user to give him information about his pro- ' 
gram, to change it, to run it, and to stop it. i 
The same program must work for all users and f 
whenever a user is put in core TYC is modified f 
so that it refers to the current user’s program, tjf 
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The user makes his requests and receives in- 
formation from TYC using the same typewriter 
as his program uses for input and output. 
Therefore, it is important that no matter what 
program the user is attempting to debug he 
shall be able to regain control if it goes astray. 
This is accomplished as follows : When the user 
starts a program running he can either retain 
the typewriter for control purposes or else give 
it up to the program. If he gives the typewriter 
to the program, then characters it types appear 
on his typewriter and characters he types are 
given to his program if it asks for them. Sup- 
pose his bad program is taking characters from 
the typewriter but ignoring them. He can then 
type the character center dot “ •” which is a non- 
spacing character on the PDP-1. If he follows 
this by a carriage return the typewriter is then 
in the control of TYC and subsequent charac- 
ters are interpreted by TYC. If he actually 
wants center dot to be transmitted to his pro- 
gram, he must type it twice. 

Suppose now that his program is in an output 
loop and refuses to stop typing. Then he turns 
the power off on the electric typewriter. The 
result of this is that the computer fails to get a 
“done pulse” from the next character typed 
within a second. Control then goes to TYC 
which tells the channel 17 program to dismiss 
the user’s program from core and returns the 
typewriter to the control of TYC as soon as 
the power switch is turned on again. 

APPLICATIONS 

The most obvious application of the BBN 
Time-Sharing system is to speed up debugging 
by allowing each user more console time and 
good debugging languages. In our opinion the 
reduction in debugging time made possible by 
good typewriter debugging languages and ade- 
quate access to the machine is comparable to 
that provided by the use of ALGOL type lan- 
guages for numerical calculation. Naturally, 
one would like to have both but this has not yet 
been accomplished on any machine. 

We can now mention some other applications 
hat our system makes possible by providing 
inexpensive console time. 

1. Small calculations. At present there is a 
arge gulf between desk calculators and compu- 
ters. One can start getting results 10 seconds 
a ter sitting down at a desk calculator, but 


extensive calculations are very tedious. The 
BBN Time-Sharing System makes possible and 
economically reasonable providing a continuous 
transition from using the computer as a desk 
calculator at one extreme to writing ALGOL 
programs at the other. An intermediate step is 
a system that allows the user to define functions 
by statements like 

f(x) - x | 2 + 3.0x X + 4.3 
or even 

g{m,n) = if m>n then g{n,m) else if rem 
( n,m ) = 0 then m else g(rem ( n,m ), m) 

and then be able to use these functions in arith- 
metic calculations by writing something like 

0(3,21) x / (38) + 19 = 

and have the computer print the answer by 
interpreting the formulas for the functions. To 
some extent this has been achieved by the pro- 
gram “Expensive Desk Calculator” written by 
Robert Wagner at M.I.T. 

2. Editing Texts. Several programs have 
been written to use the PDP-1 computer to edit 
paper tape texts. The user can originate text, 
make insertions and deletions, display the cor- 
rected text to make sure it is correct, find all 
occurrences of certain strings of symbols. 
These editing programs are much more con- 
venient for correcting programs than using 
flexowriters or than making changes in a card 
One such program, Colossal Typewriter, 
operates as follows: 

There are two modes, text mode and control 
mode. When the program is in text mode, each 
character typed by the user is added to a buffer 
held in the core memory of the computer. There 
are four exceptions to this : If the user types a 
backspace, the program deletes the last char- 
acter from the buffer, and this operation can 
be repeated as many times as may be required 
to correct a local error. Another character 
causes the program to type out the last 20 char- 
acters in the buffer, and a third returns the 
computer to control mode. The fourth special 
character — the single quote 1 causes the cliche 
whose name is the following character to be 
entered in the text if there is such a cliche. Thus 
typing ‘ a causes the cliche named a to be 
entered. In addition, the cliche Feature may be 
used to enter any of the four control characters 
into the text. The user need only type ’ followed 
by the character in question. 
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In control mode the user has the following 
facilities: to type out the buffer, to punch 
(pseudo-punch) the buffer, to read (pseudo- 
read from the drum) into the buffer a number 
of lines or until the first occurrence of a given 
cliche, to reset the ends of the buffer, to give 
the current buffer a name as a cliche, to kill the 
buffer, and to go into text mode. 

Other text-editing programs allow the use of 
the CRT on the computer to display lines of 
text. 

3. Teaching Programs. An experimental 
teaching laboratory using a system based on the 
principles of this paper is being installed at 
Stanford University. 

Additional applications of large time-sharing 
systems are described in (2), (3) and (5). 

OPERATING EXPERIENCE 

The BBN Time-Sharing System has been in 
operation at Bolt Beranek and Newman Inc. 
since September 1962. The computer is oper- 
ated in the time-sharing mode four hours per 
day. Initially, the number of typewriters was 
two but this has been increased to five. The 
present system has been found to have the 
following weaknesses which we hope will be 
corrected : There is no program library on the 
drum so that excessive use of the paper tape 
reader is required. Magnetic tape files for user 
programs are not available in the system. Five 
computer operated typewriters in one room 
make too much noise. Versions of the utility 
programs especially adapted to time-sharing 
are desired. 

EXTENSION TO LARGER COMPUTERS 

It is worthwhile to ask to what extent the 
time-sharing technique described in this paper 
is of more general use. As a computer the PDP-1 
is characterized by high speed and relatively 
small memory. Its low cost means that it will 
not ordinarily have to be shared by a very large 
number of users. Suppose we wanted a time- 
sharing system based on core-drum swapping 
on another computer. Suppose that 

n = number of simultaneous users 
t — time for a memory cycle 
m — number of words in user’s memory that 
have to be swapped 
r = response time 

/ = fraction of time taken by swaps ; 


then we have 

r — nt m( 1 +4~) under the assumption that 

the drum keeps up with the core memory and 
that the read and write halves of the core 
memory cycle are used separately. 

In the present case if we put / = .25, n = 5, 
t = 5 x 10 -6 sec m — 4000 we get r — .5 sec. 
The difference between this result and the 
actual maximum response time of .85 sec. comes 
mainly from the fact that the present drum 
system swaps a word about every 8 micro- 
seconds instead of every five microseconds 
which in turn comes from using a standard 1800 
rpm motor on a drum on which each track has 
4096 bits around. 

If we were to make a similar system for the 
IBM 7090 computer, we could have n = 5, 
t — 2 x 10~ 6 , m — 16,000 (the memory of this 
machine really consists of 16384 72 bit words) 

/ = .25 and would get 

r = .75 sec 

Thus, on account of its much larger memory 
the 7090 would have about the same relation 
between number of users and maximum re- 
sponse time as the PDP-1. This is less satis- 
factory because the expense of the larger ma- 
chine requires it to serve many more users. 
Nevertheless, such a system would still be use- 
ful. If we make the more optimistic but reason- 
able assumptions that only % of the users sitting 
at typewriters will be in run status at a given 
time and that a 3 second response time is 
tolerable, then the system could accommodate 
100 typewriters which is economically quite 
reasonable. This would require a better drum 
system than is available connected so as to 
allow memory swaps at core speed. 
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Information 

• first’ll ti nil' an issue about its processing by computers. The moral 
0 f this introductory article: computers, far from robbing man of 
his in Hcidualitv. enable technology to adapt to human diversity 


c." ; rer sjives signs of be- 
r_ contemporary counter- 
the steam engine that 
on the industrial revolution, 
computer is an information ma- 
Information is a commodity' no 
intangible than energy; if anything, 
is more pervasive in human affairs, 
command of information made pos- 
bv the computer should also make 
possible ' everse the trends toward 
: uniformity started by the 
resolution. Taking advantage 
this opportunity may present the 
urgent engineering, social and po- 
questions of the next generation. 

A computer, as hardware, consists of 
and output devices, arithmetic 
control circuits and a memory. 

essential to the complete por- 
is the program of instructions— the 
—that puts the system to work, 
computer accepts information from 
environment through its input de- 
it combines this information, ac- 
to the rules of the program 
in its memory, with information 
ls also stored in its memorv, and it 


sends information back to its environ- 
ment through its output devices. 

The human brain also accepts inputs 
of information, combines it with informa- 
tion stored somehow within and returns 
outputs of information to its environ- 
ment. Social institutions— such as the 
legislature, the law, science, education, 
business organizations and the commu- 
nication system— receive, process and put 
out information in much the same way. 
Accordingly, in common with the com- 
puter. the human brain and social insti- 
tutions mav be regarded as information- 
processing systems, at least with respect 
to some crucial functions. The study of 
these entities as such has led to new 
understanding of their structures. 

The installation of computers in cer- 
tain organizations has already greatly 
increased the efficiency of some of 
the organizations. In the 15 or 20 years 
that computers have been in use, how- 
ever, it has become clear that they do 
not merely bring an increase in efficien- 
cy. They induce basic transformation of 
the institutions and enterprises in which 
they are installed. 


ia TRONIC CIRCUITS of the kind shown on the opposite page can he regarded 
nerve tissue of the next generation of computers. The circuits, which are enlarged 
diameters, are part of a “complex bipolar array chip” made by Fairchild Semi- 
• Each of the eight complete circuits shown {dark gray) is a functional unit consist- 
18 transistors and 18 resistors. These units are connected by a larger microelectronic 
1 white i ; there are 28 units in the entire chip. Some recent computers incorporate 
circuits, but the circuits are not connected microelectronically. Possibly 
circuits will be used not only as logic elements but also as memory elements. 


In the first place, computers are a 
million to a billion times faster than 
humans in performing computing opera- 
tions. This follows from the fact that 
their working parts now change state 
in a few millionths or billionths of a 
second. Why should this quantitative 
change in speed produce a qualitative 
change in human activities that are 
facilitated bv a computer? It might 
seem that there is no way to use such 
speeds outside of the missile business 
and other exotic undertakings. The 
answer is that the increase in speed has 
meant the building of computers with 
the capacity to handle information on 
a correspondingly larger scale. The in- 
teraction of high-speed, high-capacity 
computers with their environment is 
often continuous, with many input and 
output devices operating simultaneously 
with the ongoing internal computation. 

rphe computer is, furthermore, a uni- 
^ versa] information-processing ma- 
chine. Any calculation that can be 
done bv anv machine can be done by a 
computer, provided that the computer 
has a program describing the calcula- 
tion. This was proved as a general prop- 
osition bv the British mathematician 
A. M. Turing as early as 1936. It applies 
to the most rudimentary theoretical 
system as well as to the big general- 
purpose machines of today that make it 
possible, in practice, to write new pro- 
grams instead of having to build new 
machines. 


bv John McCarthy 
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INTRODUCTION 

TO 

TIME-SHARING* 

by E. L. GLASER and F. J. CORBATO 


During the past year a great deal of attention 
has been paid in the press and in various tech- 
nieal journals to the subject of on-line real-time 
systems, particularly those involving time-sharing systems 
of a general purpose character. By time-sharing systems 
we mean those systems in which the facilities of a comput- 
er complex are rapidly commutated among mdependen 
users who are each on-line at a remote console Time- 
sharing of a central computer is not the sudden birth o 
a new idea which has come full blown from the head of 
the computer world Zeus, but rather, is a restatemen ot 
an idea that is relatively old in our field. It is interesting 
to note, for historic value if nothing else, that the early re- 
lav computers of the Jiell Telephone Laboratories were 
capable of being operated by several different users from 
a distance. Of course, only one user could operate the com- 
puter a. a time, but even in the early 1940's it was con- 
sidered useful to have remote access to these computers 
as a problem solving convenience. 

It is our purpose here to introduce the elementary 
features and characteristics which can be observed m 


contemporary operating t.me-sharmg multiple-console sys 
terns. It is not our purpose to detail here all of the 
advantages of time-sharing inasmuch as several points of 
view are given among the references. Briefly, though, we 
are assuming that time-sharing when commercially avail- 
able will be the mode in which most computers “reused. 
This assumption of time-sharing is based in part on the 
econom c savings of more efficient utilization of equip- 
ment ^n part of the increased flexibility and convenience 
to computer users, and in part on evidence ( based I on, over 
a year of pilot time-shared operation of an IBM 7 { )9 ^°^ 
puter at M.I.T. that batch-processing can largely be re- 

Pl Tmajor reason we believe most computers of the future 
will be time-shared is that current batch processing capa- 
bilities are a subset of any complete tune-sharing system. 
In particular a user of a well-organized system should be 
able to either submit at the central computer “Card deck 
prepared off-line or have the program typed in by hunself 
or others at a remote on-line console. Similarly, “''hough 
all jobs might be initiated at a console, the user could elect. 
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perhaps on the basis of job size, whether or not to await 
job completion. Moreover, the system should be such 
that the user has a choice of either immediate selective 
printing at his remote console from his program output 
file or of waiting a few hours for standard bulk output 
printed at the central facility by a high-speed line printer. 
Even magnetic tape units at the central facility can be 
made straightforwardly usable through remote consoles 
for those data processing applications which require vast 
linear files of information. The user of a time-shared sys- 
tem can, if he chooses, continue to do the equivalent of 
batch processing exclusively. However, our present experi- 
ence indicates that most users will take advantage of the 
broader spectrum of service offered by. this more flexible 
system. Finally since the cost to each user of a time-sharing 
system should be arranged to be the rental of just the 
processors, memory, etc. which each user is utilizing— not 
the entire computing complex as is of necessity the current 
practice with batch processing systems-it should be clear 
that arguments over cost are not a substantive issue when 
discussing time-sharing. 

nature of a computer 

To understand better some of the motivations behind 
time-sharing systems, the nature of computer use should be 
examined. Individuals often are not “solving problems” but 
rather, defining problems. In the conventional method 
of operating computation centers, the main use that the 
computer can be put to is solving a problem to which 
the user already knows the answer, in the sense that the 
method of problem solution is already well understood, and 
the computer is primarily used to determine specific nu- 
meric answers. Obviously there are exceptions to this 
broad generality; however, most of these exceptions come 
in the form of playing a very expensive question-and-answer 
game. In order to use a digital computer to help in the 
trial-and-error formulation of problems and the investiga- 
tion of radically new areas, it is necessary for the man and 
the machine to be quite tightly coupled. Further, it is 
highly desirable that the person doing such work be able 
to have access to a computer at the time he needs it. In 
other words, the man wants to be able to use the machine 
with the same degree of facility that he now uses other 
immediate tools of intellectual activity, such as: blackboard, 


books, notepads, desk, etc. This type of activity is quite 
familiar to those who have had any dealings with the an- 
alog computer art. It is, however, at present unusual in 
the field of digital computers. Because of the broad range 
and scope of problems to which the digital computer can 
be applied, it is of interest to expand this interactive ca- 
pability as rapidly as possible. . . k .. 

It is beyond the scope of this article to discuss in detail 
all of the necessary criteria to be met by a time-sharing 
system and, equivalently, to describe all the myriad fac- 
tors that must be taken into account in order to have a 
functioning system. It is the intent to describe, in broad 
philosophical terms, a time-sharing information process- 
ing utility and indicate some methods by which such a 
utility can be brought into existence. In most cases, the 
methods described here are those initially developed at 
the M.I.T. Computation Center and which form the cur- 
rent operating system at Project MAC. The methods are 
not necessarily optimal and are not necessarily thpse we 
would use again. The virtue of these methods, however, is 
that they are not hypothetical and the current MAC sys- 
tem is a working example. Now that we have,. to a small 
degrefe described the motivation for at least our interest in 
information processing utilities, and further, have included 
the necessary escape clauses. and qualifications, we can 
press on. 

memory protection . 

In most fields of endeavor a very small change in a basic 
premise can affect, radically, the nature and method of 
system organization. Thus, in the field of computation, 
the concept of many programs operating m a computer 
with rapid switching between them, and further, that these 
programs are written by many different individuals at d - 
ierent times, requires a fundamental change in the method 
of operation of an information processing system. In par- 
ticular it is necessary to protect the user programs from one 
another in order to preserve their independence. Of course, 
a program is never really debugged. What one means when 
one calls a program debugged is that the frequency of 
faults has dropped to a point that none has been observed 
in a reasonably long time. As a practical matter system 
programs must be treated as debugged and user programs 
as never debugged. We now see the necessity of there 
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TIME-SHARING . . . 

being hardware to guarantee that a user’s program can 
never go outside those bounds established for it by the 
executive program. This is, in our opinion, one of the 
prime requirements of any hardware system into which we 
Wish to place a time-sharing executive program. It should 
be observed that within a system in which many user 
programs are being swapped in and out of memory at 
a relatively high rate, it is often', difficult or ™P n «'ble, 
without such protective hardware, to determine the differ- 
ence between a program that has run awry and a machine 

This protection hardware can take several different 
forms; that employed in the M.I.T. Computation Center 
and Project MAC IBM 7094’s is a relocation register in 
conjunction with upper and lower bound limit registers. 
The lower and upper bound registers define regions in 
memory to which a user's program has access. Further, the 
relocation register serves the additional function of pro- 
gram relocatability. All programs are written as though 
they were in a memory of their own and start.ng at a loca- 
tion zero. Of necessity, when any form of protection hard- 
ware is emfiloved, there must be two "modes of operation, 
a user mode and an executive mode. In the user mode the 
protection hardware is effective and it is impossible to 
modify the protection state of the machine. It is also impos- 
sible to change the contents or even -have access to the 
contents of the relocation and bound registers. Further in 
this user mode it is often desirable that certain types of in- 
structions that would in other ways interfere with the func- 
tion of the system as a utility be prohibited. Such instruc- 
tions as halt, input/output, etc., fall into this category. Any 
attempt to violate these restrictions or to arbitrarily enter 
the executive mode of the system, should cause an inter- 
rupt or trap into the executive program. 

Another requirement of a time-sharing environment 
' is the necessity for a combination of hardware and pro- 
gramming system that will guarantee each users pro- 
gram access to the computer on some type of an equi- 
table and convenient basis. The simplest form of such 
access is to allot each user in the system a certain hxed 
amount of time, at the end of which a program is automat- 
ically interrupted and the next program in turn is resumed. 
Thus, each user’s program is like one point on a commuta- 
tor. More complex scheduling algorithms than this may be 
used but are not an essential element. The variations ol 
scheduling algorithms are themselves a very interesting 
topic, and when time-sharing is more common, could serve 
as the topic for an article in its own right. In any case, 
even the simplest scheduling algorithm requires an in- 
terval timer that can be set by the executive program 
which upon run-out causes a trap or interrupt. This fea- 
tore is now quite common with many modem computers. 

desired characteristics 

Up to this point we’ve discussed those topics in the 
hardware and the software that are required as a frame- 
work for a time-sharing system. They represent to the 
time-shared computing system what the basic power supply 
and clock represent to the simple computer hardware. The 
system will not function without these elements; they form 
the bare minimum of mechanism required. 

Before discussing the remainder of the elements of a 
time-sharing system, let us briefly examine what this sys- 
tem is to be. The best way to determine its desired char- 
acteristics is to look at the system from the standpoint of 
a user sitting at his console. To merely say that we will 
make a large-scale computer available to each user as 
though it was his own, is not sufficient. It is certain that 


the reader would be appalled, as are the authors, at 
the concept of having a personal large-scale binary com- 
puter without system programs available and with only ; 
typewriter access. Certainly more than this bare frame- 
work is requisite. A whole rationale of higher level opera- 
tions must be built-in to the system so that the user has 
available, to him, very comprehensive system gommands 
with which he can control the system from his console. 
System commands are required to do such simple things as: 
allow input to take place, that is to set the machine in 
such condition that it can receive information from a key- 
board- create a file; edit a file; cause the contents of a hie 
to be compiled; load and start the execution of a users 
program; etc. It is even necessary for there to be a 
command for logging into the system to identify authorized 
users uniquely and associate them with their stored files. 
These various system commands are, in fact, small sub- 
routines that are called either from the user’s program or, 
more often, by specific instructions from the user s console 
Thus, we can consider that -there is a dormant state of 
the system with respect to each user. When this dormant 
state is in effect, with respect to a specific user, the sys- 
tern is constantly looking for some form of input from the 
user’s console. During the user’s time in the allocation- 
schedule, if his program is in this dormant state and no 
input has been entered from his keyboard, no actual com- 
puter time is taken. In any case, the system should at all 
times be able to accept input signals from any user regard- 
less of his position in the allocation schedule. The partic- 
ular mechanization chosen is a function of the equipment 
to be employed in the time-sharing system. , 

In addition to the system command programs and the 
other basic control programs that have been described 
already, there is a set of programs required for what 
might be called housekeeping or administrative functions. 
Although these programs do not enter directly into the 
functioning of time-sharing, its smooth operation would 
be impossible without them. These include several cate- 
gories of programs, such as system monitors; disc file up- 
dating programs and the like. Two functions that should be 
explicitly pointed out that fall in this category are those 
that authorize persons to use the system and those that 
allow file purging and maintenance. The first of these is a 
relatively obvious function and it merely requires that there 
be a specific file which is accessible only to one in author- 
ity. This file gives the name, problem number, resource 
allocations and other pertinent information for each person 
who is authorized to use the system. 

file maintenance . 

The second housekeeping function, that of file mainte- 
nance has to do with the use of a large drum or, more 
commonly, a disc file which is generally associated with a 
time-sharing system. Although it is possible, under some 
limited circumstances, to use magnetic tape for the sec- 
ondary storage of the system, this does not appear to 
be practical. The user’s programs and data are kept on a 
disc file in the case of Project MAC. All files which are 
created are stored on the disc and subsequently accessed 
by name only and not by location. It would be wasteful for 
every user to have a fixed amount of storage assigned to 
him from the disc. Instead only a storage quota is as- 
signed to him, with actual storage being allocated only 
as required. As a consequence, it is desirable to have a, 
mechanism whereby it is possible to assipi non-conHguous 
storage areas to the same user, and this is accom- 
plished by means of list structuring each file. The dfles 
[hat belong to an individual user are then identified 
through a specific file which is his file directory. It is pe- 
riodically desirable to reorganize flies so ‘h“t u " n « e « a D' 
motion of the disc access arm is eliminated. Further, it 


appears to be wise to take periodic dumps onto magnetic 
tape from the disc file so that the system can be reinitial- 
ized to a previous state in the event of a major malfunction, 

In addition, it may be desirable to remove stale files by 
placing them on a cheaper but more inaccessible storage 
medium. 

Obviously, the classic view of a program run in a com- 
puter is no longer valid within this environment. Each 
user’s program is nothing but one element of a system of 
programs whose exact size can vary rapidly in time. 
Efficient hardware utilization is no longer the prime mea- 
sure of effectiveness. The service given to each user / 
is the criterion that must be paramount. It is important 
to realize that the majority of the programs in the system 
are user programs and that they are inherently separate 
and independent. Moreover, if we are to maintain rapid 
response to the stimuli of each user, it is essential to be 
able to switch easily between user programs which are 
by design totally decoupled. Models of time-sharing sys- 
tems have been designed and run in which the entire execu- 
tive program and all its subsidiary programs have been 
structured as a single monolithic unit. This however is 
far from flexible and prevents evolutionary development of 
the system. It is desirable to segment the executive system 
to the point that each segment or module of the system is 
relatively decoupled from others, except at very rigorously 
defined and controlled interfaces. There are two reasons 
for this: first, it makes it possible to easily modify the sys- 
tem and update various elements as newer views of system 
organization gain sway and greater importance; second, it 
means that a fault in one part of the program is limited in 
its ability to propagate into the remainder of the system. 

It is because of this rather loosely coupled nature of a 
large time-sharing system, that it is difficult to describe 
any one action that should be taken on the part of ma- 
chine designers or equipment selection committees that 
will best facilitate an efficient system. A few dos and don'ts, 
however, can be observed. First of all, the machine must 
have those basic hardware protection features in one form 
or another as described earlier in this article. Second, the 
necessary compatible communications interface equip- 
ment anil terminals must be available. It is suggested that 
terminals of the type used in communications are quite 
suitable here since, in point of fact, the user is carrying 
on a limited dialogue with the information processor and 
those facilities that have heretofore been useful in 
keyboard start-stop telegraphy are also useful here. 

Third, the necessary complement of secondary and ter- 
tiary stores should be available. These include high-speed 
drums, disc files, and magnetic tapes. It may be that some 
of the new devices, such as magnetic strip memory systems, 
will have a place in future efforts. It should be men- 
'tioned that, since programs enter and leave the primary 
storage, the feature of easy relocatability of programs 
is highly useful. It means that a program can be placed 
anywhere in the core memory where sufficient room can 
be found for it, and it can be executed from that posi- 
tion whether or not it was previously in this position. 
Since its position change can take place at literally any 
time during its execution, this relocatability must be accom- 
plished by means of hardware, as the attendant software 
conventions to make it feasible entail an inordinately large 
overhead burden. 

Fourth, although multiprocessing has not yet been used 
’ in time-sharing, the availability of more than one proces- 
sing unit that can access any part of memory in a system 
' makes it possible to assign the processing resource in a 
highly flexible manner. In small systems this may be of 
little interest; however, on large systems, this can become 
of importance as it is one way of reducing the response 
time and thereby increasing the utility of the system. 
Further, it means that a high degree of system availability 


can be obtained without requiring astronomically high re- 
liability on any one component in the system. 

Fifth the hardware should permit the type of loosely 
coupled programming system that has been briefly de- 
scribed in the preceding paragraphs. What is required 
is a flexible and highly generalized intemipt system and an 
I/O system that permits direct access to any I/O device 
without concern for the particular I/O channel that may be 
used. In the case of multiple processor systems, this inter- 
communication between I/O devices, memory units, and 
processors is critical, and can make the difference between 
a smoothly functioning system and one that barely works. 

end to batch processing? 

*We are seeing the beginnings of what can be a radical 
change in the use of computers in the next several years. 
Time-sharing should make is possible for a single com- 
puting system to be made available to a number of inde- 
pendent users either within an organization or in the not 
too distant future, •'from a number of totally different 
and possibly competing organizations. Further, it makes 
it feasible for the computer communication system com- 
plex to gather information where it is generated and to 
deliver results where they are needed. In such a system 
it is doubtful that many 60,000 line-per-minute printers 
will be used, although large numbers, of 100 line a-minute 
printers will be needed, since the printing of a page takes 
place after the information has been routed to its proper 
destination. Further, it is doubtful that many users of a 
computer will really require the heavy fan-fold output 
that they now feel necessary for reassurance but rarely 
use. Instead, one would go to the keyboard and ask so- 
phisticated questions about anv particular element in a file 
which is accessed by a central computer. This is not to 
say, however, that all computers will go predominantly 
time-sharing. On the contrary, there will still be batch 
processing for those problems not requiring intimate man- 
machine interaction; but even this, as was pointed out 
earlier, can be in conjunction with time-sharing. 

It is difficult to draw any conclusions at this time since 
time-sharing is still in the advanced development stage. 
A few comments, however, are in order. The selection of 
proper hardware will have some effect on a time-sharing 
system although the nature of the programming system is 
of even greater import. Any programming group that is 
thoroughly competent in the field of system programming 
can certainly develop a time-sharing system. However, 
the organization that is only casually familiar with sys- 
tem .programming had best wait till more of the problems 
are understood and techniques are more generally known. 
This should come about within the next few years. In any 
event, time-sharing is here. It is not a revolution; rather 
it is a more general method of making information proc- 
essors available to the user. ® 
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